CVE-2024-1286: Strangerstudios Paid Memberships Pro

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site.

Affected products

• Strangerstudios Paid Memberships Pro: before 0.7 (fixed in 0.7)

Published 2024-07-30. Last modified 2026-06-17.